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COMPUTATIONS IN CUBIC FUNCTION FIELDS OF 
CHARACTERISTIC THREE 

MARK BAUER AND JONATHAN WEBSTER 

Abstract. This paper contains an account of arbitrary cubic function fields 
of characteristic three. We define a standard form for an arbitrary cubic curve 
and consider its function field. By considering an integral basis for the maxi- 
mal order of these function fields, we are able to calculate the field discriminant 
and the genus. We also describe the splitting behavior of any place, and give 
composition and reduction algorithms for arithmetic in the ideal class group. 



1. Introduction 

Calculating invariants of a field and its maximal order remains one of the central 
problems in computational number theory. Motivated by hyperelliptic curve cryp- 
tography and well-studied cubic number helds, a host of authors have researched 
computational properties of cubic function fields. From calculating fundamental 
units [TT] , to computing in the ideal class group [T] , to tabulating [5] , to describing 
and classifying arbitrary cubic function fields [5J [TU] , the results (mostly) exclude 
characteristic three. 

In the case in which characteristic three is considered, it is often through generic 
methods. The function field analogue of the Round 2 algorithm, algebraic methods 
involving desingularization, or using Groebner basis to do ideal arithmetic, all may 
be applied to the problems considered in this paper. However, these methods are 
often impractical and can make it difficult to understand how the basic invariants 
of a function field arise from the defining curve. For elliptic curves and hyperelliptic 
curves, we may compute the desired quantities directly from the defining curve and 
the underlying finite field. For cubic function fields in characteristic greater than 
three, much progress has been made in this regard; our goal is to extend these 
computations to characteristic three. It is important to mention that work to this 
end has also been undertaken in [2]. However, the aim of our project is slightly 
different — as opposed to developing a coherent theory for signatures across differ- 
ent characteristics, we have chosen to completely analyze all cubic function fields 
in characteristic three and develop the associated algorithms for computations. 

We begin by developing the basic invariants of cubic function fields. Section 2 
defines function fields and states the standard model that will be used to define 
the field. Section 3 contains the calculation of the integral basis and the field 
discriminant for the fixed model. The following section describes the splitting 
behavior for places and this is used in Section 5 to calculate the genus. This will 
conclude the calculation of basic invariants. We review the relationship between 
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the ideal class group and the Jacobian to motivate an explicit means of doing 
computations in the ideal class group. We state integral basis for the prime ideals 
and their powers in Section 7. Using this basis motivates arbitrary ideal arithmetic 
which is given over the next two sections. Finally, we state an algorithm to do 
composition and reduction in the ideal class group and conclude with an example 
computation. 



As there are many good introductions to algebraic function fields (for example 
[131 El), we will only seek to clarify the notation used in this paper. As usual, let 
¥ q be a finite field and ¥ q [x] and ¥ q (x) be the ring of polynomials and the field 
of rational functions, respectively, in x over ¥ q . An algebraic function field is a 
finite extension T of ¥ q (x); it thus may be written as T = ¥ q (x, y) with y a root 
of H(T), where H(T) is an irreducible monic polynomial in (F q [x] ) [T] of degree 
n = [J 7 : ¥ q (x)}. Hence to study cubic function fields, we consider affine planar 
curves H(x,T), where H £ ¥ q [x, T] is a bivariate polynomial that is absolutely 
irreducible and of degree three in T. 

When char(F g ) ^ 3, cubic function fields may be studied by examining the 
standard form for the defining polynomial which is given by T 3 — AT + B = 
with A,B£ ¥ q [x] provided there is no non-constant Q £ ¥ q [x] such that Q 2 \A and 
Q 3 \B (see [10] for details). By considering these birationally equivalent curves, it 
is possible to study arbitrary curves as a two-parameter family. Our goal will be 
to find a model which gives a similar two-parameter family in characteristic three. 
Henceforth, let char(F 9 ) = 3 unless explicitly stated otherwise. 



Write H(x, T) = ST 3 + UT 2 + VT + W with S, U,V,W £ ¥ q [x] and SW ^ 0. If 



U = V — 0, then the function field associated with this curve is purely inseparable, 
and hence isomorphic to the rational function field (see Proposition III. 9. 2 of [13]). 
We thus require U ^ or V ^ to avoid this degenerate case. 

If U = then making the polynomial monic yields a curve in of the form T 3 — 
AT + B = 0. In terms of the original parameters, A = —SV and B — S 2 W . 
Otherwise, U ^ and transform via T — > (T + V)/U to eliminate the linear term. 
Considering the monic, integral, reciprocal polynomial, we get a curve in the form 
T 3 - AT + B = 0. If N = S - U 2 V + U 3 W, then A = -N 2 U 2 and B = N 2 S in 
terms of the parameters of the original curve. 

Henceforth, we will restrict our attention to curves of the form T 3 — AT + B = 0. 
In what follows we use the fact that T — >• T + i yields the birationally equivalent 
curve T 3 — AT + (i 3 — iA + B) = 0. Our goal will be two-fold — to minimize both 
the repeated factors dividing A and the degree of B. 

If there is a polynomial Q £ ¥ q [x] such that Q 2 \A and Q 3 \(i 3 —iA + B) for some 
i £ ¥ q [x] then it is possible to consider the curve given by 



If the characteristic is not three, the existence of a Q such that Q 2 \A and Q 3 \B 
implies that y/Q is integral. Likewise, in characteristic three the existence of Q and 
i implies (y + i)/Q is integral and has a minimal polynomial (|2.1|) . Hence this is the 
appropriate generalization from the case where the characteristic is different from 



2. Standard Form 



(2.1) 




COMPUTATIONS IN CUBIC FUNCTION FIELDS OF CHARACTERISTIC THREE 3 



three. Also, in each case Q corresponds to removable singularities that preserve the 
shape of the model for the given curve. 

To find Q and i, it is sufficient to check irreducible polynomials P such that 
P 2 \A. Begin by writing i = ig + i±P + i^P 2 with io, i±,t2 € ¥ q [x] with degree less 
than that of P. Since only io affects the congruence r 3 — iA + B = (mod P 3 ), 
we solve i 3 ^ + B = (mod P). It then becomes a matter of checking whether 
Iq — IqA + B = (mod P 3 ). If the congruence holds, redefine A as A/P 2 and B as 
(i 3 — iA + B)/P 3 . This process may be repeated as needed. 

We now turn our focus to reducing the degree of B. If 3| degB and 2degP > 

3degA, we can write B(x) = b 3n x 3n + 6 3n _ia; 3n_1 + h b with 6 3 „ ^ 0. Then 

consider the linear transformation T — > T— {b^n^^x 11 (note that b\^ £ ¥ q because 
¥ q is perfect). Under this map we get a new curve 

T 3 - A(x)T + b^ lX 3n - 1 + . . . + b + A(x)bl f n 3 x n = 0, 

where the polynomial 63„-ix 3n_1 + . . . + bo + A{x){bz n ) 1 l 3 x n has a lower degree 
than B(x). By repeating this procedure it is possible to force the curve to satisfy 
one of the following two distinct criteria: 

(2.2) 3\degB and 2 deg B > 3 deg ,4 
or 

(2.3) 2degB<3degA 

Definition 2.1. A curve is said to be a standard model (or in standard form) for 
a cubic function field if it is of the form T 3 — AT + B = with no Q, i 6 ¥ q [x] such 
that Q 2 \A and Q 3 \i 3 -iA + B and satisfies either (|2~2|) or (|2~3)) . 

It will also be useful to have a simple criterion to detect singularities. 

Proposition 2.2. The curve T 3 — A{x)T + B(x) — is nonsingular if and only if 
degd = where d = gcd(A{x), A'(x) 3 B(x) + B'(x) 3 ). 

2 

Proof. A singular point (a, b) G ¥ q satisfies the following three equations. 

(2.4) b 3 - A(a)b + B(a) = 0. 

(2.5) A(a) = 0. 

(2.6) -A'(a)b + B'(a) = 0. 

From (12.51) . a is a root of A(x), and combined with (|2.4[) we see that — b 3 = B(a). 
Cubing dHHJ) we get -A'(a) 3 b 3 + B'(a) 3 = which implies A'(a) 3 B(a) + B'(a) 3 = 0. 
Thus a is a common root of A(x) and A'(x) 3 B(x) + B'(x) 3 . 

For the converse let a be a common root of A(x) and A' (x) 3 B(x) + B'(x) 3 . Since 
a is a root of A(x), (|2.5p is satisfied. Since ¥ q is perfect, we can find b such that 
b 3 = -B(a) in order to satisfy ([2^4]) . With (|2~tl) and (|2~5l) satisfied, it is clear that 
(|2.6j) is also satisfied by the above construction. □ 

Note that for large q we do not expect a curve selected in standard form to 
be singular. That is, if singularity is detected by degc? not being 0, then it is a 
question of when two "random" polynomials are relatively prime. This happens 
with probability roughly 1 — 1/q. 

Calculating the standard form and the integral basis, as well as finding the field 
discriminant and the genus are all closely related to singularity. The square factors 
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removed from A in the conversion to standard form correspond to singular points, 
which simplifies future calculations. In fact, if the standard form is nonsingular then 
{1, y,y 2 } is an integral basis for the maximal order (see Prop 5.10 of [7]). We now 
know that D = disc(y) = A 3 (for the reader who is unfamiliar with this concept, 
it will be defined more formally below). In the next section we will show that the 
square-free factorization of d = gcd(A(x), A'(x) 3 B(x) + B'(x) 3 ) is I = ind(y). With 
D and / in hand, we will have A = disc (J 7 ). 

Knowing that D = A 3 and that A differs from D by square factors is enough to 
determine when T is an Artin-Schreier extension. 

Theorem 2.3. T is an Artin-Schreier extension if and only if A(x) is a square. 

Proof. Cubic extensions are Galois (which is to say an Artin-Schreier extension 
in characteristic 3) if and only if their discriminant is a square. In order to have 
a square discriminant, A{x) must be a square. Conversely, if T 3 — T = f j g with 
/, g G Fq[a;] is an Artin-Schreier extension then T 3 — g 2 T = fg 2 is an integral model 
for this equation. By renaming, we have A(x) = g(x) 2 a square. □ 



3. Integral basis and field discriminant 

We will follow Chapter 2 Section 17 of [3] to find an integral basis for Ojr, the 
integral closure of ¥ q [x] in T. Recall that the powers 1, y, y 2 form a basis of the 
F g (ic)-vector space T. An F 9 (x)-basis given by {ao,ai,a 2 } is triangular if a an d 
a\ are an ¥ q (x)-linear combination of 1 and l,y, respectively. The three conjugate 
mappings taking y to the three roots y = y(°>, y^\ y^ 2 ' defines for every a G J- its 
three conjugates a — a^°\ a^ 2 \ and allows for the following definition of the 
discriminant of three elements: 

disc(a ,ai,a 2 ) = det(a i (j) )o< iJ < 2 G F q (x). 

The ring Ojr always admits a triangular basis, one element of which is (obviously) 
in F*. The discriminant of T/¥ q (x) is disc(J-") = disc(ao, ot\, a%) where {ao, a±, a 2 } 
is an integral basis of J-/¥ q (x), i.e. a basis for Ojr. For any element a G J 7 , the 
index of a satisfies disc(a) = ind(a) 2 disc(J r ), which will be crucial in determining 
a basis for Oj=. 

Writing down a basis in triangular form, we will be able to deduce restrictions 
on the elements of the basis simply by using the fact that they are integral. These 
restrictions arise naturally by examining the minimal polynomial of each element. 
Following [3] , we choose the product of the latter two basis elements to be in ¥ q [x] . 
Consider the integral basis given by 

y-i c + by + y 2 ' 



1. 



with ii, I 2 , i, c, b G ¥ q [x] (the choice to reuse i will become clear). As mentioned be- 
fore, the integral basis construction was a motivation for the choice of the standard 
model; in particular, the minimal polynomial of p is given by 

o A i 3 -iA+ B 
P - 72 P + = 0< 

Since this is an integral equation in p, it must be that If \A and I 3 \i 3 — iA + B. This 
is the same criterion as (|2.1j) . Thus the reduction to standard form forces I\ = 1. 



COMPUTATIONS IN CUBIC FUNCTION FIELDS OF CHARACTERISTIC THREE 



5 



Now consider poo £ F g [x] to get additional criteria on i, b, c, and I 2 : 

(b - i)y 2 + (A-ib + c)y - (ic + B) 

<» = T 2 ■ 

This implies i = 6, c = i 2 — A, and l2\ic+ B. Combining the last two statements, 
I 2 \i 3 — iA+B. Rewrite oj as (y 2 +iy+i 2 — A)/I 2 and consider its minimal polynomial 
to get our final criterion: 

3 A 2 (i 3 -iA + B) 2 n 
uj 3 + —oj 2 - - -3 = 0. 

This gives I 2 \A and /f |(i 3 — iA + B) 2 . Choosing i such that I 2 is of maximal 
degree yields the basis. This observation will in fact force I 2 , which is the index of 
y, to be square-free. From this point forward the subscript of I 2 will be dropped 
and the index of y will be denoted /. 

Proposition 3.1. A curve in standard from has I = ind(y) being square-free. 

Proof. Let P e ¥ q (x) be irreducible such that P\I, the index. If vp(A) = 1 then 
vp(I) = 1. So assume vp(A) > 2 and consider i such that I 3 \(i 3 — iA + B) 2 . If 
v P (i 3 -iA + B) = 2thcnv P (I) = 1. However, ifv P (A) > 2 and v P (i 3 -iA + B) > 3 
then the curve is not in standard form. □ 

Having established that the index is square free, it is possible to calculate i. 
Since i is unique modulo /, i is determined by its residue class modulo each distinct 
prime dividing I. For each irreducible polynomial P\I, we solve (i 3 — iA + B) 2 = 
(mod P 3 ) and constuct the solution using the Chinese Remainder Theorem. As we 
did when removing singularities, we write i = io + i\P ' + i 2 P 2 and solve congruence 
equations modulo P, P 2 , and P 3 . 

With the index of y calculated, it is straightforward to determine the discriminant 
of the function field simply by noting that D = A 3 and hence A = A 3 /I 2 . It is well 
known that the field discriminant is closely tied to ramification. This is developed 
more fully in the next section. 

Letting A = EI and FI 2 = i 3 — iA + B, we have the following identities for 
various products of integral basis elements: 

p 2 = Iuj + A, uj 2 = -Elo - Fp, puj = -FI. 



4. Splitting of Places 

The places of F 9 (x) consist of finite places, identified with the monic irreducible 
polynomials in F g [a;], and the place at infinty P^, identified with 1/x. Every 
place P has a corresponding discrete valuation on ¥ q (x) denoted vp and a discrete 
valuation ring Op = {G G ¥ q (x)\vp(G) > 0}. These definitions may be naturally 
extended to the field T. That is, the finite places are associated with the non-zero 
prime ideals in Ojr and the infinite places are associated to the non-zero prime 
ideals in the integral closure of Op^. If p is a place of T then let w p denote its 
associated discrete valuation and O p = {a e J 7 \v p (a) > 0} its discrete valuation 
ring. There exists a place P G F 9 (x) with v p (P) > 0; we say p lies above P and 
write p|P. The positive integer e(p|P) = v p (P) is the ramification index and we say 
P is ramified if e(p|P) > 1 and unramified otherwise. Further, if gcd(e(p|P), q) = 1 
a place is called tamely ramified and wildly ramified otherwise. The inertial degree 
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of a place is denoted f(p\P) and has value [Op/p : Op/{P)] if P is a finite place 
and [Op/p : F g ] for the infinite place. 

Knowing the splitting behavior of places is a key component to determine the 
genus of the function field T . We now turn our attention to characterizing the 
splitting behavior of all the places, starting with the finite places and concluding 
with the infinite place. 

Theorem 4.1. Let P G F q \x\ be an irreducible polynomial and let qi = q de s( p ) . 
Also let a and b be defined by T 3 — aT + b = T 3 — AT + B (mod P). Then the 
principal ideal (P) splits into prime ideals in Ojr as follows: 

(1) Ifvp(A) > 2 then (P) = p 3 . 

(2) If v P (A) = 1 then (P) = qp 2 . 

(3) Otherwise P \ A, d = gcd(T qi — T, T 3 — aT + b), and we consider three 
cases: 

(a) 7/degd = then (P)=p. 

(b) J/degd = 1 then (P) = pq. 

(c) Ifdegd = 3 then (P) = pqt. 

Proof. For primes not dividing A, {l,y,y 2 } is an integral basis of Op[y]/Op and 
thus Kummer's Theorem (see Theorem III. 3. 7 of [13]) may be applied to get the 
desired result. By Dedekind's Different Theorem, ramified primes are distinguished 
by the multiplicity with which they divide the field discriminant and thus the the 
two ramified cases are as claimed (see Theorem III. 5.1 in [E]). □ 



While we could consider a transformation to bring the infinite place to a finite 
place and invoke Kummer's Theorem as above, there is no guarantee that the in- 
finite place is nonsingular. We will avoid this approach and appeal to completions 
using Theorem 3.1 of [6]. This theorem implies that there will be a root in F(x _1 ), 
where F is some finite extension of F g , if and only if the infinite place is not wildly 
ramified. We will show that a curve in the form of (|2.3j) characterizes the infi- 
nite place being tamely ramified or unramified by constructing just such a root in 
F(a; _1 ). From the construction, it will then be a matter of counting the number of 
roots, and hence finding [F : ¥ q ) as this corresponds to the inertial degree. After 
dealing with the four cases that arise in this situation, it will be clear why (|2 .2[) 
implies that the place at infinity is wildly ramified. 

Assume the curve is in standard form and satisfies (|2.3|) . Consider constructing 
a root y 6 F(x -1 } of 4>(T). We can write 

y = y n x n +y n -ix n ~ 1 + ... 

where g/j £ F. Let A(x) = a2 n x 2n + . . . + ao and B(x) = b3 n x 3n + . . . bo with 
cij, bi £ F q . By writing the polynomials this way, we only assume that either 02« or 
»2n-i is nonzero. If a,2n = then &3„ = and 6371-1 = in order to satisfy (|2.3[) . 
The coefficients of the powers of x in the equation y 3 — A(x)y + P>(x) = are as 
follows: 
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X' 



,3't 



Vn - O-lnVn + &3« 
— ain-lVn — O-lnVn-1 + &3n-l 
O-ln-lVn — 0j-2,n—\Vn-\ ~ a 2n2/n-2 + &3n-2 



X' 



,3n-l 



X' 



,3n-2 



.r' 



,3n — 3 



>3n-3 



The equation associated with x 3n is cubic in y n . After the initial cubic equation, 
we have an equation associated to x 3n ~ l that is linear in y n ~i for i > 0. That is, 
the values for y n -i are uniquely determined by the initial choice for y n . Therefore, 
we examine the solutions to Y 3 — a,2 n Y + b^ n = 0. 

If dcg(A) is odd then a 2 „ = and Y 3 + b 3n = has exactly one solution. This 
occurs in the partially ramified case because there is exactly one root in ¥ q (x^ 1 ) 
and another distinct root in F g (a; _1 / 2 ). Otherwise when a2n ^ 0, the finite field 
extension which contains y n determines the splitting type. The completely split case 
has three distinct roots in ¥ q (x^ 1 ). In this case Y 3 — a^nY + ^3n splits completely 
in ¥ q [Y] . The inert case will have a root in F ? 3 (x~ 1 } and therefore Y 3 — a^nX + &3„ 
is irreducible over ¥ q [Y] . The last case corresponds to the polynomial factoring as 
a linear and an irreducible quadratic in Fg[Y]. Therefore the place is partially split. 

Suppose the curve in standard form satisfies ()2.2|) . If we let bk be the leading 
coefficient of B(x) (with 3 J(k, and k > 3n), then the first equation is bk = which 
is a contradiction. This forces the above system of equations to be inconsistent. 
Therefore a curve in standard form satisfying (|2.2[) must have a wildly ramified 
place at infinity. We summarize the above discussion in following theorem. 

Theorem 4.2. The place at infinity splits as follows. 

(1) If<j>(T) satisfies (QO| then (oo) = p 3 . 

(2) If <j)(T) satisfies 12. 3]) and deg(A) is odd then (oo) = pq 2 . 

(3) If <j>{T) satisfies K3\) and deg{A) is even then d = gcd(T«-T,T 3 -a 2 „T + 
&3„) determines the splitting type. 

(a) If degd — then (oo) = p. 

(b) //degd = 1 then (oo) = pq. 

(c) If degd = 3 then (oo) = pqr. 

This gives a classification of the signature of the function field that involves a 
simple computation using very basic parameters of the curve. We can now turn 
our attention to calculating the genus of the function field. 



We will calculate the genus with the Hurwitz Genus Formula (see Theorem 
III. 4. 12 in [13]), which requires knowledge of the degree of the different. Having 
the field discriminant, Dedekind's Different Theorem gives the different exponents 
for the finite places. The infinite place is more complicated. However, since the 
problematic case is when wild ramifiation occurs, we are fortunate in that wild 
ramification is also total ramification. For totally ramified places, determining the 
different exponent is a matter of finding a uniformizer for the place and evaluating 
a particular valuation (see Theorem III. 5. 12 of [13]). 



5. Genus 
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Lemma 5.1. If the place at infinity is totally ramified then it has different exponent 
(5oo =2degS-3deg J 4 + 2. 

Proof. Let p be the place at infinity in J- . Since it is totally ramified and must 
lie above the unique infinite place in ¥ q (x) with uniformizer 1/x, v v (x) = —3. By 
examining the equation y 3 — A(x)y + B(x) = 0, we can determine v p (y) = — deg B. 
We will apply Theorem III. 5. 12 of |13) . The uniformizer used in the theorem will 
depend on which residue class deg-B resides in modulo 3. 

If deg B = 3m — 1 then a uniformizer of p is given by t = yj x m . The minimal 
polynomial for t is f(t) = t 3 — Atx~ 2m + Bx~ 3m . Applying the theorem we see 

<5oo =v p (f'(t)) =v p (Ax- 2m ) = -3de gj 4 + 6m = 2degS - 3degA + 2. 

The case deg B = 3m + 1 follows in a similar manner. □ 

Theorem 5.2. If J 7 has a totally ramified place at infinity then the genus of J- is 
g = deg B — deg I — 1, 

Proof. The Hurwitz Genus Formula gives 

2g - 2 = -2\T : ¥ g (x)] + d (P\ P )- 

per? 

This yields 

2g - 2 = -6 + (3deg A - 2 deg J) + (2dcgB - 3 deg A + 2), 
which upon simplification gives the desired result. □ 

Theorem 5.3. If J- has a place at infinity that is tamely ramified or unramified, 
then g — (3 deg A — 2 deg / + <5oo — 4)/2 where Soo — if deg A is even and Soa = 1 
if deg A is odd. 

Proof. The proof follows as before except now that the infinite place is not wildly 
ramified, and hence its different exponent 5^ can only take the values or 1. Since 
the genus is an integer, the parity of deg A determines the value of <5oo . □ 

We have described the basic invariants of cubic function fields in characteristic 
three. The focal point for the remainder of this paper is to develop the arithmetic of 
ideals. As in the previous sections, one can appeal to generic algorithms to solve this 
problem. However, these algorithms typically require operations on large matrices 
or an appeal to Groebner basis. We desire, like elliptic curves and hyperelliptic 
curves (using Cantor's algorithm), a method to do computations that depends only 
on the underlying curve parameters and the finite field. 

6. Divisor Class Groups and Ideal Class Groups 

This section provides an overview of the relationship between the Jacobian of a 
curve and the ideal class group of a function field. As there are many sources for 
this material (see e.g. pQ, [5], [4] [10], [32]), we will be relatively brief and only 
provide the relevant definition and results where needed. Once this is completed, 
it will be possible to develop arithmetic on ideals and, for a certain class of curves, 
fully realize arithmetic in the ideal class group. 

A divisor is a finite formal sum of places in T. The set of all divisors forms a free 
abelian group. We will work in a specific finite subgroup of this group. Let S be the 
set of finite places in F. There is an isomorphism between the divisors with support 
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in S, T>f{S), and the fractional ideals in Op, X(Of). The Fundamental theorem of 
ideal theory in an algebraic function field [4, p 401] gives the isomorphism as 



v P {a)P >d\u {0}. 
Pes J 



(6.1) $ : V%{S) -^l{Or), D^^a£F > 
This may also be defined by 

Pes 

In general the ideal class group is related to the Jacobian by the following exact 
sequence (see Theorem 14.1 of [8]) 

(0) -> V T {S c )/Vr(S c ) ^Jt^ CI(O f ) -> Z//Z -> (0), 

where S c is the set of infinite places (the set compliment of S in Pjr). Specifically, if 
a function field has a unique place at infinity of degree 1, the points on the Jacobian 
will be isomorphic to the ideal class group. 

We use the hierarchy of divisors (and hence ideals) defined in jT| so that there 
is a way to represent elements of the divisor class group of degree zero in a unique 
way with minimal information. A divisor D is effective if D > (that is, np > 
for all P £ P_f) and denote its effective part as D + , i.e. 

D = V n P P => D + = Y n P R 

pgPjf PePj,n P >o 

A degree zero divisor is called finitely effective if its finite part is effective; it can be 
shown that every divisor D £ is equivalent to a finitely effective divisor. This 
is the first step in the hierarchy. 

A finitely effective divisor is semi-reduced if there does not exist a non-empty 
sub-sum of the form (a) where a £ ¥ q [x]\¥ q . Again, it is straightforward to show 
that every divisor is equivalent to a semi-reduced divisor, extending the hierarchy. 
A semi-reduced divisor D is reduced if deg D + < g where g is the genus of the curve. 
Using the Riemann-Roch Theorem, it is possible to prove that every divisor class 
also contains a reduced divisor. 

To complete the hierarchy, we define a distinguished divisor to be a divisor 
D such that for all other equivalent finitely effective divisors £>i, we have that 
deg 13^ < deg_D+ implies D = D\. If a divisor is distinguished, it is reduced [TJ 
Lemma 1.12]. Unfortunately, we have no apriori way of knowing if such a divisor 
exists or of verifying that a divisor is distinguished. 

The above definitions for a divisor D can immediately be transferred to fractional 
ideals by first considering D + and then applying the isomorphism (|6.1[) . Finitely 
effective divisors map to integral ideals, and hence we can do computations in this 
context. Note that in the ideal class group we will mostly work with primitive 
ideals, that is: o is primitive if and only if there is no non-constant polynomial 
a(x) £ ¥ q [x] such that (a(x)) | o where (a(x)} represents a(x)Op. Under the above 
correspondence, we see that primitive integral ideals give an equivalent notion to 
semi-reduced divisors. We will call an ideal reduced (resp. distinguished) if it is the 
image under the above correspondence of a reduced (resp. distinguished) divisor. 
We now turn our attention to determining when it is possible to show that each 
divisor class, or equivalently, ideal class, contains a distinguished element. 



10 



MARK BAUER AND JONATHAN WEBSTER 



Let a = a + i)/) + cweJ : with a, 6, c S F q (x). Then the norm of a is given by 

Njr/ Vq (x)(a) = N(a + bp + cuj) = 

a 3 - a 2 cE + abcIF - ah 2 A + b 2 cAE + be 2 AF - bc 2 EFI - c?F 2 I - b 3 FI 2 . 

Theorem 6.1. Let a = a + bp + cus E Of, IdegB > 3 deg ,4, and 3 \ degFI 2 . 
Then degTV(a) = max{dega 3 ,deg& 3 .F/ 2 ,degc 3 F 2 /}. 

The proof follows from a careful analysis of the degrees of the relative terms in 
the norm expression, and noting that the criterion that 3 \ deg FI 2 actually forces 
deg FI 2 = deg B and thus the curve satisfies (|2.2I) . A detailed version of the proof 
can be found in |15j . 

It is natural to wonder if (|2.2p implies 3 \ degFI 2 . Unfortunately, a class of 
curves exists for which this implication is not true. We can construct a curve such 
that 3 \ deg B and 3| deg FI 2 . In general we do not expect to deal with such curves; 
it requires a very special sort of singularity. An example of this type of singularity 
is given in the following construction. 

Example 6.2. Consider the function field given with parameters A = (x 2 + x — 
l)(x 2 + 1) and B = —x H + x 6 + x 5 + x 4 + x 2 + 1. These parameters define a 
curve that is in standard form and satisfies (|2.2[) . Both divisors of A are singular, 
I = (x 2 +x- l){x 2 + 1), and i = x 3 + x 2 . Thus degFI 2 = deg (i 3 - iA + B) = 9. 

Having established this property of the norm, we can now return to the specifics 
of distinguished ideals. In particular, Theorem 16.11 is exactly what is needed to 
extend Theorem 5.1 of [1] to this case. 

Theorem 6.3. If 2 deg B > 3 deg A, and 3 \ degFI 2 , then every nonzero ideal 
contains a nonzero element of minimal norm which is unique up to multiplication 
by an element in . 

The proof is identical to that in [1] but we sketch the key points. The validity is 
established using Theorem 16. II Assume there are two elements a.{ — a, + bip + CiUj 
for i = 1,2 whose norm has the same degree and suppose deg N(cti) = deg a 3 . Let 
k be the quotient of the leading term of a\ divided by the leading term of 02 then 
Q!3 = cti — kcti has smaller norm. A similar argument works when the degree of the 
norm is determined by bi or c,-. 

Theorem 6.4. If 2degB > 3degA, cm<i 3 { deg F/ 2 , then every ideal class con- 
tains a unique distinguished ideal. 

Proof. By Theorem 16 . 31 there exists a\ G J of minimal norm from some ideal J. We 
consider the primitive integral ideal J\ = (oli) J~ l . Assume there is some integral 
primitive ideal J 2 equivalent to J\ with deg N(J 2 ) < deg N(J{). Then J 2 J — (a 2 ) 
with a 2 e J. This gives degiV(Ji) = degTV(ai) - degTV(J) > deg7V(J 2 ) = 
deg./V(a!2) — degA^(J) which implies degTV(ai) > degN(a 2 ). By assumption a\ is 
an element of minimal norm; therefore a 2 = kai for k G F^ and J\ — J 2 . Thus 
every ideal class contains a unique distinguished ideal. □ 

All the theoretical pieces are in place to develop arithmetic in the ideal class 
group. Ideal inversion and multiplication pose no major theoretical obstacles, and 
the above establishes a unique way to find a distinguished ideal in a given class. 
Combining all of the pieces will allow composition and reduction in the ideal class 
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group. The remaining sections make the above explicit for the considered function 
fields. We start by describing an integral basis for primes and their powers which 
gives insight to how inversion and multiplication will work as explained afterward. 
Finally, we give explicit algorithms that produce the element of minimal norm and 
its corresponding distinguished ideal. 

7. Triangular basis for prime ideals 

Having described how the finite places split, it will be helpful to have a concrete 
description of generators for the prime ideals in terms of the basis elements devel- 
oped in Section 4. Scheidler provided a comparable statement in Theorem 3.1 of 
[12] for all prime ideals in a purely cubic function field of characteristic not 3 that 
was an analog of the theorem of Voronoi |14j for number fields. Having classified 
the splitting type of prime ideals, we follow their lead and give the triangulr bases 
along with basic products and powers of the prime ideals. 

Throughout the following sections, proofs will occasionally be omitted for the 
sake of brevity. In particular, when a particular technique may be used successfully 
to compute the basis in multiple cases, it will only be included once. The interested 
reader may always refer to |15j for complete proofs. 

7.1. Ramified primes. There are three cases to consider for the ramified primes. 
When calculating powers of primes, ramification tends to make the treatment here 
a little easier for a given prime. A ramified prime is expected to be totally ramified 
so p 3 = (P)Ojr = (P)[l, p,ui] for some irreducible polynomial P 6 F q [a;]. This 
leaves only the calculation of the basis for p and p 2 . 

Proposition 7.1. Let vp(A) > 1 and v P (I) = so that (P) = p 3 . Then 

p = [pj + p, -i-'f 2 + w] and p 2 = [p, pp, r l f - r x f P + u] 

where f 3 = FI 2 (mod P), and = 1 (mod P). 

Proof. Apply Kummcr's theorem to the minimal polynomial of p to see 

p 3 - Ap + FI 2 = p 3 + FI 2 = {p + f) 3 (mod P). 

This implies p = (P, f + p). To get the last element we consider p(f + p) = 
fp + Iuj + A E p. Using that I is relatively prime to P we get the last element as 
claimed. 

For p 2 , consider (/ + p) 2 — f 2 — fp + Ju + A e p 2 to see that the third term in 
the basis has the form claimed. Note v p (P) — 3, so P G p 2 . Since the ideal has to 
have norm P 2 this forces the second element of the basis to be as stated. □ 

The next two primes we consider both lie over primes dividing the index. Unlike 
the above primes and the unramified primes (as we will see in the next subsection) , 
these primes can give rise to ideals that will have u with a polynomial coefficient. 

Proposition 7.2. Let vp{A) > 1 and v P (I) = 1 so that (P) = p 3 . Then 

p = [P,p,u] and p 2 = [P,p,Pu]. 



Proof. By applying Rummer's theorem to the minimal polynomials of p and u>, we 
see that both are in p. Squaring p and considering the 9 resulting elements leads 
to the latter result. □ 
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Tamely ramified primes are all that remain to consider. We state their bases 
here, but we will treat powers of p and q 2 with unramified primes. 

Proposition 7.3. Let vp(A) — 1 and vp(I) — 1 so that (P) = pq 2 . Then 

p = [P,p,E + u], q = [P,p,u], 
q 2 = [P,Pp,E~ 1 Fp + u], and pq = [P, p, Puj] 
where E^ 1 is the inverse of E modulo P. 

Proof. Apply Rummer's theorem to the minimal polynomials of p and ui and pro- 
ceed as before. □ 

7.2. Unramified primes. The unramified primes are the primes that we expect 
to deal with most often in the course of doing computations. There are several 
different cases to be accounted for depending on the inertial degree and the primes 
involved in the product. First we deal with the case in which p has inertia degree 
1, and then when p has inertia degree 2. This case will also handle the product of 
two primes of inertia degree 1 and the powers of q 2 for the split ramified case. The 
last case will be where p, q both have inertial degree 1 and we need to consider 
products of the form p l q J ' with i ^ j. 

Proposition 7.4. Let p\P have inertial degree 1 and ramification index 1. Then 

p = [P, -a + p, -I^ 1 (a 2 - A) + w] 

where a is a root of the minimal polynomial of p modulo P and = 1 (mod P). 

Proof. The ideal p is generated by (P, — a + p), and the rest follows. □ 

The proposition below deals with primes that have ramification index 1 and 
inertia degree 1. It therefore also handles the unramified prime lying over the 
tamely ramified primes. 

Proposition 7.5. For p with ramification index 1 and inertial degree 1, we have 

p 1 = [P\-X t + p,-Z t +Lu] 

where 

• Z l+1 =Z, + kP\ 

• k = -d(EZi)- 1 (mod P), 

• C t = -{Zf-EZ 2 + F 2 I)/P\ 
. X l+1 = -FIZ- + \ (mod P), 

and X\ and Z\ are defined and given in Propositions \ 7. 3\ and \7.4\ 

Proof. The definitions in this proposition make it important that Z\ be invertible 
modulo P. In Proposition 17.31 E is invertible modulo P. For Proposition 17.41 the 
element Z\ is invertible because it is a nonzero root of the minimal polynomial of u> 
modulo P, that is to say only ramified primes correspond to being a root modulo 
P. 

Since P z \N(uj — Zi), that basis element can be written as to — [Zi + kP l ). We 
now describe how to choose k so that the element is correct for p 1+1 . 

N(-(Zi + kP l ) +lo) = -[{Zi + kP'f + E(Zi + kP 1 ) 2 + F 2 I] 

= -(Zf - EZ 2 + F 2 I) - EZ t kP l (mod P l+1 ) 

= -{CiP* - EZikP 1 ) (mod P l+1 ) 
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Since we want C t P l - EZ l kP i = (mod P i+1 ), we can choose k = C 1 (EZ i )- x 
(mod P). Such an inverse exists because P is relatively prime to both E and Zi. 
Now that — Z i+ i + lo e p l+1 we can see that (Z i+ i — uj)p = FI + Z i+ ip e p ,+1 . 
This gives the term with — Xi + \ + p as claimed. □ 

Proposition 7.6. Let q be a prime with inertia degree 2. Then 

q = [P,Pp,r 1 {W + A) -I- l Mp + ui\ 
where p 3 - Ap + FI 2 = (p - a)(p 2 - Mp+W) (mod P). 

Proof. Kummer's theorem gives q = (P, p 2 — Mp + W), and similar techniques 
complete the proof. □ 

Notice the form of the product of two distinct unramified primes lying over a 
completely split prime: 

pq = (P, -ax + p) (P, -a 2 + p) 

= (P 2 , P{-ai + p), P(-a 2 + p), A + aia 2 - (ai + a 2 )p + Iw) 
= [P, Pp, I- 1 (A + aia 2 ) - I~Vi + a 2 )p + w}. 

Here the last line is justified by the fact that (a± — a 2 ) is relatively prime to P. 
Thus, the greatest common divisor of P{a-y — a 2 ) and P 2 is P. There are three 
types of ideals that can have the form [P, Pp, —Ni — M\p + us]: 

• q = [P, Pp, u) — Mp — W] from Proposition 17.61 

• q 2 = [P, Pp, E~ 1 Fp + uj] from Proposition ESI and 

• pq = [P, Pp, I~ 1 (A + ctia 2 ) — I^ 1 (ai +a 2 )p + uj] from the exposition above. 
Proposition 7.7. Let r represent any of the three ideals above. Then 

r< = [P\P l p,N t - M iP + uj] 

where 

• L{M i _ 1 M 1 I + Ni^! +N 1 -E) = l (mod P l ), 

• Mi = -L{F + Mi-xN x +M 1 N l _ 1 ) (mod P l ), and 

• Ni = L{M\FI + Mi-iFIMi—iMiANi-iNi) (mod ?'). 

Proof. The previous work establishes the base case i = 1 and we argue by induction. 
r i-x r = jpi-l } pi-l p) u _ Mip + N .} [ Pj p p; u _ Mlf} + N ^ 

In the nine possible products of the basis elements only (w— Mip+Ni)(to— M\p+ 
N\) does not contain a factor of P. Thus the coefficient of u> has to be relatively 
prime to P. If it were not, the product would not be primitive. Multiplying through 
by its inverse modulo P % gives the desired basis element. 

The product contains P % and P l p. A norm argument shows that r* cannot 
contain P 1 ^ 1 or P l ~ 1 p. Thus the ideal has the desired norm and the elements 
stated form a basis. □ 

All that remains is to handle p'cf +J where j > and each prime has inertia 
degree 1. By Proposition 1 7 . 71 we know 



(7.1) 



(pqy = [P l ,P i p,N i -M i p + uj} 
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and by Proposition [73] 

(7.2) tf l = [P',-X qj +p ) -Z lti +w], 

(7.3) = [P l+ \ -X qi+j + p, -Z qi+ . + u], and 

(7.4) p* = [P i ,-X Pi +p,-Z Pi +u]. 

Combinations of the above products will help determine the proper basis of p*q 8+ - ? . 

Proposition 7.8. Using notation as above 

p i q i+o = [pi+j iP i(-X q . +p),H + G P + uj] 

where we let N be defined by NX Pi = 1 (mod P l +-?) and 

G = NZ qi+j (mod P l ) and H = N(-FI - X Pi Z q . + .) (mod P i+] ). 

Proof. Considering the product of (|7.1[) and (|7.2[) . we see that P t+ i and P l (~X qj + 
p) are in p i q i+J . By considering the product of (|7.3[) and (|7.4[) , we can see that 

(-i Pi+P )(-Z qi+j + w )epV +3 

Since X Pi is relatively prime to P it is invertible modulo P i+J . Multiplying through 
by its modular inverse gives the third element of the basis. The other two elements 
are in the ideal by construction. It remains to establish that they are indeed basis 
elements, which is easily accomplished by a norm argument. □ 

We have dealt with all of the prime ideals and their possible powers and products. 
We now turn to arbitrary ideal arithmetic. Any given ideal factors into the product 
of four ideals: 

J = [si,si(ui + p),vi + wip + u][s 2 ,s 2 {u2 + p),v 2 + w 2 p + u] 

[s 3 ,p, SgW][s4, «4( u 4 +p),s'l(v4 + W 4 p + 0j)} = JxJ 2 J 3 J4. 

Each of the ideals is relatively prime to the others and is determined by which type 
of prime appears in the factorization. For p|P, we have four criteria: 

• p divides J\ iff P is unramificd, 

• p divides J 2 iff P is totally ramified and does not divide the index, 

• p divides J3 iff P is totally ramified and divides the index, and 

• p divides J4 if and only if P is split ramified. 

We call these primes Type I, Type II, Type III and Type IV, respectively. Recom- 
bining ideals factored in this way is a straightforward application of the Chinese 
Remainder Theorem, while finding the factorization for a given ideal is an applica- 
tion of polynomial factorization. There are a few reasons for this approach. The 
first is for simplicity as the propositions are easier to state for a given type. The 
combined proposition would look much like each constituent part where the final 
result is an application of the Chinese Remainder Theorem. The second reason is 
that the difficulty often lies in a particular case and this allows the exposition to 
highlight the trouble. 

Furthermore, from a computational perspective, we are also drawn to this ap- 
proach. Two of the four cases involve curves that have singularities, and hence we 
can choose to avoid them. We could also easily choose a curve with no finite ram- 
ification and ignore three of the four cases. Even in the worst case scenario where 
all types of primes are possible, we still do not expect to deal with three of the 
four products in the course of doing arithmetic. A rough heuristic argument shows 
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that probability of two randomly chosen ideals with degree less than g contain a 
ramified prime is 4<?/g, which will be small if q is large. Thus from a computational 
point of view, three of the four cases will rarely occur even when a curve is singular. 

8. Inversion and Division 

Some basic properties of the structure of ideals in cubic function fields devel- 
oped in |12) remain true even in characteristic three. We cite without proof the 
containment criterion for ideals written with a triangular basis. 

Proposition 8.1. (Lemma 4.1 of [T2]) Let Ii = [s^, s'^ui + p), s"(vj + Wip + ut)] 
for i = 1, 2 be two ideals. Then I\ C I 2 if and only if 

S2\si, s 2 |s' 1; S2 s[ui = s[u2 (mod S2), 

s±wi = s"u>2 (mod s' 2 ), and s'[v\ = s'{(v2 + U2(w\ — W2)) (mod s 2 )- 

Our first goal is to develop ideal inversion. As we only wish to work with integral 
ideals, we compute a primitive ideal that is in the ideal class of the inverse of a given 
ideal. As a reminder, the notation for such an inverse will be J and the notation 
for division will be J . We label the propositions depending on which of the four 
ideal types the proposition covers. 

Proposition 8.2. (Inversion for Type I and II primes) If Ii = [s, s'(u + 
p) 7 v + wp + ui], then I 2 = I\ = (s)!^ 1 is given by I 2 = [S, S'(U + p), V + Wp + to], 
where 

S = s, S' = s/s', U = -Iw (mods'), 
W = —ul^ 1 (mod s/s'), and V = E — v — WIw (mods). 

Proof. Since s £ I\, it is clear that (s)-Tf 1 is an integral ideal. We show that the 
above choices provide a correct ¥ q [x] basis for I2. The fact that J1J2 = (s) will 
be used extensively in this proof (and the proofs to follow). Since s G I2, S\s. 
Examining S(v + wp + ui) G (s), we conclude s\S and hence s — S. Consider the 
norm of the ideal (s) to determine S': 

s 3 = N({s)) = N(h)N(I 2 ) = ss'sS'. 

Therefore S' = s/s' as claimed. The other products of the two ideals give the 
remaining congruences. We start with S'(U + p)(v + wp + cj) and examine the 
coefficient of cj: 

S'(U + p)(v + wp + u>) € (s) ^ s —(U + Iw)^U = -Iw (mods'). 

s 

The congruence for W (resp. V) follows by considering the coefficient of uj in the 
product s'(u + p)(V + Wp + oj) (resp. (V + Wp + cj)(v + wp + uj) ) and arguing as 
above. □ 

We note that the above proposition is simpler for nonsingular curves because 
1 = 1 and most of the congruences can be replaced by equalities. It was fortunate 
that we could deal with Type I and Type II primes with a single proposition without 
an appeal to the Chinese Remainder Theorem. We will often be able to deal with 
these two types of primes together. 

Proposition 8.3. (Inversion for Type III primes) If Ii = [s,p,s"u], then 
h = 1 1 = (s)Ii is given by I 2 = [s,p : [s/s")lu]. 
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Proof. This follows immediately from Proposition 17.21 □ 

Here the index divisors do not seem too complicated, but for Type IV ideals 
they will prove very troublesome. The approach taken for this case will become 
familiar. Just as factorization helps simplify the four cases, factorization within 
this case will prove useful. Our approach is to consider a factorization that most 
closely resembles some of the basic prime powers of Section 7. The treatment of 
Proposition l7.81 that dealt with products of the form p l q l+J , is enlightening here. In 
the proof we appeal to the fact that the product can be viewed as (pq) 4 and q J . This 
is the sort of factorization that we will use in many of the following propositions. 

Proposition 8.4. (Inversion for Type IV) If Ii = [s, s'(u + p), s"(v + wp + w)] , 
then I 2 =h = (s)^ 1 is given by I 2 = [S, S'{U + p), S"(V + Wp + J)], where 

S = s, S' = -^j-, S" = s I = gcd(-^,v) 
ss si \ss / 

r n I A li \ { ( mod s ") 

U^\\ V /} , V = (mod s/s's" Sl ) , 

I ^ (m ° d S) \e (mod J) 

W = E-t-F (mod s/s's" Sl ), 
and s" , s/s's"si, and s' are pairwise coprime. 

Proof. Factor I\ as 

r s 

h = [s",p,s"uj][s',s'p,wp + u 



s's" 



,u + p,v + wp + uj 



By factoring the ideal in this fashion, we can find the inverse of each factor. The 
inverse of the first two factors is an immediate consequence of Proposition [731 The 
inverse of the last ideal in the above factorization has two factors since it could 
contain either ramified primes or powers of unramified primes, which is determined 
by the term associated with w and s/. For the ramified primes in this product, the 
inverse is [si,p,siu] and this gives V = (mod si). The remaining factor of the 
inverse has the form 

yielding the only congruence for W and the remaining congruence for V. The 
above immediately shows that the choices for S' , and S" are correct. A quick norm 
argument shows that S — s as claimed. □ 

The remaining portion of this section leads to arbitrary ideal division. We be- 
gin with a series of lemmata that will handle the simplest case of division, and 
will later be used to handle the general case. Consider two primes p and q lying 
over a completely split place P. Given (pq) 1 and p 1 , we find (somewhat trivially) 
(pq) l p~ l = q 1 . Thus the product (pq) 1 is split into two ideals of equal norm, p 1 and 
q l - 

Lemma 8.5. (Splitting for Type I and II primes) Let Ii = [s, sp, V2 + W2P+0J] 
and Ii — [s,Ui + p, V\ + ui\ be two ideals such that I 2 C I 1 . Then J = = 
[s, U + p,V + ui], where 

U = Iw2 — u\ (mod s), V = V2 — Iw 2 + uiiv 2 (mod s). 
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Proof. By Proposition 18. 2\ h = {s)[s, I1V2 + p, E — V2 + id] Therefore we can 
write 

J[s, Ui + p, V\ + ld]{s, Iw 2 + P,U 2 W 2 - V 2 + Id] = (s). 

Since J — [s, p + U, ui + V], it is only a matter of finding the correct congruences 
for V and U. Using (U + p){u\ + p){Iw2 + p) 6 (s) and the coefficient of id, we find 
U = IW2 — u\ (mod s). To find V, we note that v 2 + W2P + u> € J and subtract 
w 2 (U + p). □ 

Lemma 8.6. (Splitting for Type III primes) Let I2 = [s,p,suj] and 1\ — 
\s,p,ui\ be two ideals such that I\ C I 2 . Then J = I2I1 1 — [s, /0, oj] . 



Proof. This follows immediately from Proposition 17.21 □ 

Lemma 8.7. (Splitting for Type IV primes) Let I2 = [s's", s'p, s"(v2 + W2P + 
id)] and I\ — [s's",p,vi + id] be two ideals such that 1% C l\. Then J = I2I1 = 
[s's", p, V + id], where 

V = E (mod d), V = (mod s's"/d), and d = gcd(s", «i). 

Proof. By Proposition 17. 3[ J — [s's", p, V + u>] for some V. For a given prime P, 
I2 contains either pq or q 2 and no higher powers, and the ideal I\ contains either 
p or q. The quantity d corresponds to the ramified primes in I\. For these primes 
the unramificd conjugate is the inverse, and hence justifies the choice for V modulo 
d. □ 

Rather than proceed straight to the division propositions, we illustrate the 
method behind the division in Figure 1. The hardest part of division is track- 
ing the various products lying over completely split primes. The figure illustrates 
the order of operations (as described in the proof) used to complete ideal division. 
For p and q lying over a completely split prime P we will walk through the division 
process in the case that the dividend is p 8 q 6 and the divisor is p 5 q. 











p 5 q 






1 \ 




1 \ 


Factor 




p 6 q 6 
1 


V 
1 


pq p 4 


Divide 




p 5 q 5 
1 


P 2 


1 1 

1 P 4 
1 1 


Divide 




p 5 q 5 


1 

1 


1 p 2 






/ 1 


1 


1 1 


Factor 


p 3 q 3 
1 


p 2 q 2 
1 


1 
1 


1 p 2 
1 1 


Divide 


pV 


q 2 


1 


1 1 



Figure 1. Division of p s q b by p 5 q 



The tree for the dividend ends with three branches. It should be noted that the 
last two nodes on the tree are relatively prime; more specifically, at least one of 
them is one. This will be key for the next proof because it relies on the product of 
the those two nodes being relatively prime. 
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Proposition 8.8. (Division for Type I and II primes) Let Li = [si^s'^m 
p),Vi + w.ip + u] for i — 1,2 be such that L 2 C 1^. Then J = = [S,S'(U 

p), V + Wp + uj], where 

(mod si/(s[dj) 



S = 



S 2 

s[d' 



g, = S 2 d 
Si 



U 



Lw 2 
u 2 



1*1 



(mod s 2 /{s' 2 d)) ' 



V= (W-w 2 )U + v 2 (modS), W = w 2 (mod S'), 



and d = gcd ( — m — u 2 
\s' 2 s[ 



Proof. We begin by factoring both I\ and I 2 into two different ideals: 



1 1 = h,\h,2 = [s'i, s'ip, Vi + Wip + u] 
The first division is 



Si 

-r,Ui + p, Vi - UiWi + Ul 



.1) 



— ,—p,v 2 + w 2 p + uj 



All that remains of the divisor is I\ 2 — [ s i/ s 'i? u i + P-, v i ~ u,iW\ + w] . We consider 
the greatest common divisor of this ideal with the corresponding ideal arising from 
I 2 . This is the justification for d in the proposition statement. We perform the 
following division: 



•S'2 



-, u 2 + p, v 2 - U 2 W 2 + UJ 



[d, ui + p, vi — U1W1 + uj] 



S2 



, u 2 + p, v 2 - U 2 W 2 + UJ 



which justifies one of the two congruences for U. We factor out of the ideal in (18.1 
the part that matches the remaining divisor. That is, 



— , —p, v 2 + w 2 p + u 



s'nd s' d 



-p, v 2 + w 2 p + UJ 



si 



— ,U 1 +p,V 1 - WxUi + UJ 

s\d 



Si Si 

We apply Lemma 18.51 to the right hand ideal of (|8.2[) and the remainder of the 
divisor to get 

si s\ 

-n^-nP^ v 2 + w 2 p + uj 

s\d s\d 

Si 2 
- 1 —,IW2 — U\ + p,V2 — Iw 2 + U\W 2 + UJ 

s\d 

This ideal gives the other congruence for U and the division is complete at this 
step. The choice for S is justified by looking at the first term in the three ideals 
that remain; likewise 5" is the product of the coefficients of p: 



S=|iL||!2:]|^L] = ^L and S' = ^ 



si 



S2 



s' 2 d 



S2 



s[d 



Si 



Since v 2 + w 2 p+uj G J, it just remains to modify this element so that it is canonical. 
This justifies the choice for V and W. □ 
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Proposition 8.9. (Division for Type III primes) Let U = [sj,p, s'{uj\ fo 



1,2 be such that L 2 Q I±. Then J — I 2 I 1 



S : 



s'{d' 



s'.'d 

S" = — , and d = gcd 

Si 



[S, p, S"u>], where 
si s 2 ' 



Proof. This follows by using the same arguments presented in the proof of Propo- 
sition E^H The key distinction is how the ideals are factored: 



[Si , P, Si wj 



-Ji,P'U 



The rest of the arguments are simplified given that these are products of totally 
ramified primes. □ 

Proposition 8.10. (Division for Type IV primes) Let Li = [si,s' i (ui+p),s' i '(vi+ 
Wip + ui)]fori= 1,2 be such that I 2 QI X . Then J = I 2 I^ 1 = [S, S'(U + p), S"(V + 
W p + u>)], where 



s 



S'2 



S' = gcd 



,/s ' < ) £i). 5" -gcd 



Si 



Sl 



2 



u = 





"2 



gcd 



• s 2 



Sl 



SoSq S ■t s 



(mod si/Ks'/d)) 
(mod s 2 /(s 2 s 2 'd)) ' 

vi - W1U1 - v 2 + w 2 u 2 



? 2 & 2 ^i^i 

S"V = s' 2 \(W-w 2 )U + v 2 ) (mod S), and S"W = s' 2 'w 2 (mod S'). 

Proof. We begin by factoring both L\ and I 2 into the ideals J,,! and ii ]2 as above. 
The first division is 



(8.3) 



i 2 a 2 "-a I \ 

7 — 775 — P, — («2 + W2P + W) 



Proceeding as in the proof of Proposition 18.81 the next division yields 

S2 

, /,, ."2 + P, W 2 - U 2 W2 + W 

s 2 s 2 a 

which justifies the latter congruence for U. We decompose the ideal on the right in 
to get a factor that matches the remaining divisor: 



(8.4) 
where 



'2 a 2' 

si 



, S'p, S"(v 2 + w 2 p + u) 



Sl 



s' lS '{d 



1S3P, 4' ("2 + W 2 p + w) 



gcd 



si 



and S3 = gcd 



si 



s[s'{d' s'{ 



Note that S'S" — s^s'^d/si and s 3 s 3 ' = si/s[s l {d. Apply Lemma [8.71 to the right 
most ideal of (|8 ,4[) and the remainder of the divisor to get 

-1 



S 2 S ^ ft 



Sl 



, P, ^3 + W 
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where V3 is given in Lemma 18.31 This ideal gives the other congruence for U and 
the division is complete at this step. The choice for S is justified by looking at the 
first term in the three ideals that remain: 



si 



s 2 s 2 d 



S2 



3-2 



s[s"d J \ si J \s' 2 s 2 d J s[s"d 

The choices for S' and S" are justified in (|8.4[) . Since s' 2 '{v 2 + w 2 p + oS) € J, it just 
remains to modify this element so that it is canonical and this justifies the choice 
for V and W. The argument here is the same as in Proposition 18 .81 except we have 
to account for the coefficient of u>. □ 

We close this section with a proposition on dividing a nonprimitive ideal by a 
primitive ideal. Consider an ideal of the form (d)l2, where I2 is primitive, and a 
primitive ideal I\. To compute (d)I 2 I^ 1 , we begin by removing as much of I\ from 
(d) as is possible. The remaining factor of I\ is then removed from I 2 . The prim- 
itive parts of the two divisions are Id and I m , and their product is not necessarily 
primitive. While this might seem problematic, the propositions on multiplication 
can be used calculate the product. A proposition on multiplication will invoke this 
proposition, but it is invoked under the assumption that I\ completely divides (d) 
and that there is no corresponding factor I 2 . 

Proposition 8.11. (Nonprimitive division for Type I and II primes) 

Let I 2 — d[s2, s' 2 {u 2 + p), v 2 + w 2 p + u] and I\ = [s\, s[(ui + p), Vi + W\p + u>] be 
such that (d)I 2 C Ii. Then IJ — l2^\ X = {D^Idlm, where 



Id = [S2,4(«2 +P),V2 + W2P + LO] 

is calculated by Proposition \8.8l 



81 



DiD 2 



— p(lti + p),v 1 +wip + uj 



I m = [DiD2,Di(ui + p),vi +Wxp + ( 
is calculated by Proposition[ 



Di = gcd(si,d), D 2 = gcd 



si 



D 1 



id D 3 = 



DiD 2 



Proof. We note that I m C (d) and I m [si/ D1D2, s' x /Di{u\ + p), vi + w%p + lj] = h 
— 1 



Therefore (d)I v 
[ai/£>iZ> 3 ,«i/I»i(«i 



I m . After this division, the factors that remain in I\ are 
p),vi + W\p + lo] and this is contained in I 2 . □ 



The next two propositions are stated without proof. The proofs follow a sim- 
ilar argument as the proof above and rely, like this proof, nearly entirely on the 
previously proved propositions. 

Proposition 8.12. (Nonprimitive division for Type III primes) 

Let I2 = d[s 2l p, s 2 lo] and I\ = [s\, p, s'{uj] be such that {d)l2 C I x . Then J — 
hli 1 = (D 3 )I d I m , where 

n -1 

Id = [s 2 ,p,s 2 uj} 
is calculated by Proposition 



81 



I m = [DiD 2 ,p,DM 
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is calculated by Proposition 



Di = gcd(s", d), D 2 = gcd ( ^, ) , and L> 3 



s'r D, r DiD 



1^2 



Proposition 8.13. (Nonprimitive division for Type IV primes) 

Let h = d[s 2 ,s' 2 (u 2 +p),s' 2 (v 2 +w 2 p+ui)] and Ii = [si,s[(ui+p),s'{(vi+Wip+uj)] 
be such that (d)I 2 C 7 1 . Then J — I2I1 1 = (Di)ldlm; where 



Id = [S2,S2{U2 + p),V2 + w 2 p + w] 

is calculated by Provosition \8.10\ 



-1 

Si Si 

-, -pr{ui + p),D 2 (vi + wip + uj) 



D X D 2 D S D x 



I m = [DxDzD^D^m +p),D 2 (v 1 + w iP + uj)] 
is calculated by Proposition\ 



Di = gcd(si, d), D 2 = gcd(s'/, d), D 3 = gcd ( -^77, d ) , and D 4 = 



s^s'i 1 D X D 2 j 1 D X D 2 D 3 

9. Ideal Multiplication 

Theoretically, ideal multiplication is the easiest operation that will be discussed 
since it may be achieved by simply performing linear algebra. The goal of these 
propositions is to eliminate much of the excess work that would be required to 
reduce the nine cross products arising in the multiplication of two ideals down to 
a basis. The extreme amount of redundancy is obvious for certain products. For 
example, the product of two relatively prime ideals may be computed quickly using 
the Chinese Remainder Theorem. Computationally, relatively prime operands are 
to be expected and the product may be calculated as Scheidler did in Theorem 4.4 

of [12]. 

Theorem 9.1. (Theorem 4.4 of [12]) Let U = [s,-, s'^m + p),s"(vi + wip + uj)] 
with i = 1,2,3 be two ideals such that gcd(si, S2) — 1. Then I3 = is given by 

S3 = sis 2 , s' 3 = s[s' 2 , S3 = s"s' 2 \ 

= / Ul ( mod Sl / S 'i) w = I Wl ( m0d and 
3 1 U2 (mod Si/s'2) ' 3 1 u>2 (mod s' 2 ) 1 



V3 



V\ + ui(w 3 — wi) (mod Si/s'{) 
v 2 + u 2 (w 3 - w 2 ) (mod S2/S2) 



In contrast to cubic function fields of unit rank one, we can not assume that 
the two operands will be relatively prime. Thus, we will be forced to develop 
ideal multiplication systematically. The first set of propositions assumes that the 
product is primitive and this will be used to aid in the case where the product is 
not assumed to be primitive. 

In proof of Proposition IS . 8l the two congruences for U were sufficient in guarantee- 
ing that U was determined uniquely modulo S/S'. This was because Si/(s[d) and 
s 2 /{s' 2 d) were relatively prime. Had they shared a common factor, U would have 
been determined only up to the least common multiple of s\/{s'^d) and s 2 /{s 2 d). 
This proposition is built to handle just such a situation. 
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Proposition 9.2. (Primitive Multiplication for Type I primes) 

Let U = [si, s-(ui +p), Vi + Wip + uj] for i = 1,2 be such that I\I 2 = I3 is a primitive 
I. Then h = [S, S'{U + p), V + Wp + ui], where 



S = 



sis 2 di 
d 



S' = 



s[s' 2 d 



W = w 3 - cS', V = v 3 - qS'U (mod S), 

S\S 2 dl 



di 

and U 

We choose c to make deg W minimal and define u 3 , v 3 , w 3 , d, d\ as follows 



+ (mod 5/5'). 

s\s 2 d z 



d = gcd 



£1 £2 



?i 3 = i*i (mod sidi/s'iSd), 



and k is chosen such that di 



di = gcd(d, ui - u 2 ), 
u 3 = u 2 (mod s 2 di/ s' 2 d), 
(ul - u 3 A - FI 2 )S'd 1 | kA 



W3 = ais 2 wi + a 2 s 1 w 2 + a^s^ui + u 2 ) + a i s' l (v 2 + uiw 2 ) 

+ a 5 s' 2 {vi + u 2 wi) + a 6 (viw 2 + v 2 wi - F) 
v 3 = a\s 2 v\ + a 2 s\v 2 + a3s' l s' 2 {u\u 2 + A) + a 4 s' 1 s(itiw 2 - FI + w 2 ) 
+ a 5 s' 2 (u 2 vi — FI + w\A) + a & (viv 2 + wiiv 2 — W\FI — W 2 FI) 

and ai, a 2 ,a 3 , a^, a^, and a§ are given by the extended euclidian algorithm as: 

1 = ais 2 + a 2 s\ + a^s^s^I + a 4 s' 1 (?ii + Iw 2 ) 

+ a 5 s' 2 (u 2 + Iwi) + a 6 (vi + v 2 + w\w 2 I - E). 

Proof. Since we assume J3 is primitive, it has a canonical basis of the form claimed. 
We begin by factoring 1\ and I 2 and deal with their product using smaller and 
simpler ideals. The easiest part of the product is 

[s'^s'^V! +w 1 p + uj][s' 2 ,s 2 p,v 2 +w 2 p + uj] = [sis 2 ,sis 2 p, V + Wp + co}. 

While we still need to find congruences for V and W, we will return to those later 
and focus on the difficult part of the product: 



(9.1) 



si 

— ,ui 



+ p,vi — w\u\ + uj 



S2 

-r,U 2 + p,V 2 
l s 2 



W 2 U 2 + LU 



The goal will be two split this product up into two factors. The quantity d signifies 
common possible prime factors in this product, and d\ indicates those primes that 
appear as squares in the product. Thus, we write the above product as 



,U + p,V 



d_ d 

d\ ' d 



■p, V + Wp + uj 



We conclude from this that S' = s[s' 2 d/di and by equating norms that S — 
s\s 2 d/d\. Combining the two previous statements we see that 



-,U + p,V + uj 



sidi 
s[d 



, u\ + p,v\ - w\U\ + uj 



S 2 d! 

s' 2 d 



,u 2 + p, v 2 - w 2 u 2 + UJ 
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This justifies the choice for u 3 , and note that u 3 is defined uniquely modulo the least 
common multiple of sidi/s^d and s^dx/ s' 2 d. Thus we can write U = u 3 + kS/S'di 
and consider 



S 
S 7 



{ul - u 3 A - FL 2 ) + kA- S 



di 



S'di 

^3 - u, a ^i - FL 2 so 
{u\ - u 3 A - FI 2 )S'd 1 



From the definition of u 3 , S/S'di divides u 3 — u 3 A — FI 2 so we can conclude 



kA 



S 

as claimed. This determines U modulo S/S' as needed. To calculate V and W we 
find any element of the form v 3 + w 3 p + uj G L 3 . Since L 3 is primitive and contains 
no index divisors, the greatest common divisor of the coefficients of us arising from 
all possible products of basis elements of L\ and I2 must be 1. Once this element is 
computed, it is a matter of subtracting multiples of the two previously calculated 
basis elements to ensure the third element is canonical. □ 

The calculation of W and V is not as difficult as it looks. As we noted before, 
if si and S2 are relatively prime the above proposition is superfluous and the mul- 
tiplication can be done via the Chinese Remainder Theorem. Assuming s\ and S2 
are not relatively prime, we still expect that we will be able to write 1 as a linear 
combination of fewer than all six terms. 

Proposition 9.3. (Primitive Multiplication for Type II primes) Let li — 

[si, s'^ui + p), Vi + Wip + uj] for i = 1, 2 be such that I1I2 = I3 is a primitive ideal. 
Then I 3 = [S, S'(U + p), V + Wp + u], where 

S = s 1 s 2 /d, S' = ds'^, d = gcd ( -i ) , 

U = f (mod S/S'), W = r x ! (modS"), V = fr 1 (mod S), 
where f is defined by f 3 = FI 2 (mod S). 

Proof. We invoke Proposition 17.11 to calculate U , V, and W. □ 

Proposition 9.4. (Primitive Multiplication for Type III primes) Let Li = 

[si, p, s'i'u)] for £ = 1,2 be such that L\L 2 = L 3 is a primitive ideal. Then 



p, (s 1 s 2 d)uj 



where d = gcd 



d 

Proof. This follows from Proposition 17.21 □ 

Proposition 9.5. (Primitive Multiplication for Type IV primes) Let Li = 

[si, s'i(ui + p), s'({vi + Wip + lo)] for i = l,2 be such that LiL 2 = I3 is a primitive 
ideal. Then L 3 = [S, S'(U + p), S"{V + Wp + U))}, where 

b = , S = s 1 s 2 d, S = s 1 s 2 did2. 

dd\ 02 

To define d\, ^2 , and d, let 



£ cd ( -TU^ V ^ ~ W i U i ) f° ri = 1 ;' 2 > 
S i S i 
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the 



d = gcd(s q i,s q2 ), di = gcd I s q2 , — 



si 



and d 2 = gcd I s q i, — 



A'2 



S 2 S 2 s q2 



FFe defined U = (siS 2 did 2 )u3 where u% satisfies 



M3 = Mi (mod 



si 



id U3 = W2 (mod — 



«2 



s 2 s 2 dd\d 2 



Finally we can choose V and W as 

S"W = S"w 3 -qS / , S"V = S"v 3 -qS'U (mods'), 
where q is chosen so that deg V and deg W are minimal and 

S"w 3 =ais 2 s"wi + a 2 sis 2 w 2 + a 3 s\s 2 (ui + u 2 ) + a 4: s' 1 s 2 (v 2 + U1W2) 
+ a 5 s' 2 s'{(v 1 + u 2 wi) + a 6 s"s 2 (viw 2 + v 2 ?«i — F) 

S"v 3 =a 1 s 2 s"v 1 + a 2 s 1 s 2 v 2 + a3s' 1 s 2 (wiM 2 + A) + a4s' 1 s 2 (u 1 v 2 - FI + w 2 ) 

+ a 5 s 2 s"(u 2 vi - FI + w x A) + a 6 s"s 2 {vxv 2 + W!W 2 - w x Fl - W 2 FI) 

where ai for i = 1, . . . , 6 come from the extended greatest common divisor calcula- 
tion, 

S" =a\s 2 s'l + a 2 s 1 s 2 + a^SiS^I + ais^s'^m + Iw 2 ) 

+ a 5 s' 2 s'{(u 2 + Iwi) + a & s"s 2 {vi + v 2 + wiw 2 I - E). 

Proof. The details of the proof are similar to those above. We will try and note 
only the key distinctions. We factor It into three factors as 



li — Ji.lJi.lJ', 



i,3 



S S' 



-,U t + p,Vi - WiUi + p 



*i,P: s'^Uj}[s' l ,s' l p,V l +W lP + Uj} 



Since J3 is primitive, all three of gcd(s 2 ', s'{), gcd(s 2 , s'{), and gcd(s 2 , s[) are one. 
This simplifies the number of possible products to consider. We factor J^i further 
to distinguish ramified primes (denoted with a subscript q) from the unramificd 
primes: 



J1.1 = [& 



s,s, s a 



, Ui + p,Vi — WiUi + iO 



Now there are three possible type of products these two ideals can form. Products 
corresponding to a common place of F g (x) lying below p and q indicate the presence 
of that polynomial being a factor of the coefficent of uj. This justifies the choice 
of di and d2. There are at most single powers of q in either of the two ideals that 
correspond to that part of the factorization. Their greatest common divisor justifies 
the choice of d. We remove these factors from their corresponding ideals in Jj^. 
We can choose u 3 from these two divisors of Jj,i- This gives u 3 unique modulo 
S/(S'S"). Since S" divides U this justifies the choice of U. Lastly, we chose V and 
W in the same manner as in the previous proposition. However, the fact that these 
ideals correspond to index divisors means that the greatest common divisor of the 
terms with uj will no longer be 1 but S" . □ 



Much like Proposition 19 . 21 the greatest common divisor calculation looks compli- 
cated but in general S" can be found with fewer terms than the 6 given. 
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Now we deal with the case that the product of two ideals is not primitive. The 
key to these propositions is finding and removing the nonprimitive factors. The 
remaining product is primitive and the previous propositions may be invoked. 

Proposition 9.6. (Multiplication for Type I primes) For i = 1,2 let Ii = 

[sj, s'^ui + p), Vi + Wip + oj] be two ideals . Then I\l 2 = (D)I 3 where I 3 = I[I 2 J 
and D = D\D 2 D 3 and these quantities are as follows: 

Di = gcd(s2,si/si,"i + Iw 2 ), D 2 = gcA(s' 11 s 2 /s' 2 ,u 2 + Iwi), 

gcd(s f 1 /D 2 ,s' 2 /D 1 ) 



Do 



gcd(s' 1 /D 2 ,s' 2 /D 1 ,w 1 -w 2 ) 
si s{ 



D 1 D 2 D 3 ' D 2 D- 



■(ui + p),Vl + W\p + OJ 



I'2 



•S'2 



-(u 2 + p), V 2 + W 2 p + OJ 



and 



D X D 2 D 3 D X D 3 

J = {Do) (\ L D 3 ,D 3 p, vi + wip + oj] [D 3 , D 3 p, v 2 + w 2 p + oj]^ 
and the last calculation is done by invoking Propositions \8.& \8.11[ and \9.2\ 



Proof. We factor 1\ and I 2 as in Proposition 18.8 



h = h,ih,2 = [s f i, s'ip, Vi + Wip + oj] 



— ,Ui + p,Vi +Wip + 0J 



Of these four factors the non-primitive part of the product does not arise from 
^1,2^2,2- We find the non-primitive part from the product Ii, 2 I 2 ,i (resp. I 2 , 2 h,i)- It 
suffices to consider the coefficient of a;. Hence D\ = gcd(s 2 , si/s' 1: u\ + Iw 2 ) (resp. 
D 2 = gcd(s' 1 ,s 2 /s' 2 ,u 2 +Iwi)). We remove D\ (resp. D 2 ) from J^i and I 2 , 2 (resp. 
I 2t i and /1.2) and rename as follows: 



si 



s[ D t 



, tii + p, vi + wip + oj 



III 



s\ s\ 
D- 2 'D- 2 P ^ 



wip ■ 



ji - 

1 2,2 — 



S 2 

s'oDi 



, u 2 + p, v 2 + w 2 p + OJ 



, and I' 2l = 



D\ ' D\ 



p, v 2 + w 2 p + OJ 



The product Iil 2 now has the form (DiD 2 )I[ 1 I[ 2 I' 2 X V 2 2 and any remaining non- 
primitive factor comes from I' 1Y I 2 \- 
Let 

h, 3 = [As, D 3 p, vi + wip + oj] and 7 2 .3 = [A, D 3 p, v 2 + w 2 p + oj], 

where D 3 is defined above. The choice of A is justified because gcd(s[/ D 2 , s' 2 / Di) 
is the possible primes that could be part of the non-primitive product. However, 
the previous greatest common divisor contains too many primes. For a given prime 



P we need to be able to distinguish between pq and p . If wi 



W-2 



then 



the associated primes correspond to a square and that justifies the choice for the 
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denominator in D 3 . We justify the claim for the ideal J by noting the following 
equalities. 

^1,3-^2,3 = II, 3-^2,3-^1,3 -£2,3(^1, 3 ^2,3) 1 

= (D 3 ) ((D 3 )/(I^ h~ 3 )) 
= (Ds)J 

The last ideal is the one given in the proposition statement and it is primitive. We 
remove the factor 1^3 from I[ 2 and ^2,3 from I 2 2 to get the other two primitive 
ideals. The product of these three ideals is primitive and can be calculated by 
Proposition HEU □ 



The totally ramified primes will be much easier to deal with. For the two types, 
appealing to the propositions that govern their powers from Section 7 will be suf- 
ficient. 

Proposition 9.7. (Multiplication for Type II primes) For i = 1,2 let Ii — 

[si, s'^Ui + p), Vi + Wip + u>] be two ideals such that I\I 2 — {D)I 3 with I 3 = I[I 2 J 
and D = D\D 2 D 3 . These quantities are given as follows: 



Di = gcd 



-r,s 2 



Sl 



Ik 



D X D 2 D 3 D 2 D 3 
s 2 s' 2 



D 2 = gcd (y, s'^j , D 3 = gcd(4, s'i), 
(ui + p), Vi — WiUi + UJ 
(u 2 + p),v 2 - w 2 u 2 + UJ 



D1D2-D3 D\D 3 

j = [D 3 ,f + P ,r 1 f 2 + uj}, 

with f satisfying f 3 = FI 2 (mod D 3 ). 

Proof. Much like the previous proposition, the key is to factor the ideals and find 
where the nonprimitive factors arise. Unlike the previous proposition, constructing 
the equivalent ideal J is trivial. This is because D 3 is squarefree and Proposition 
17.11 states the form of these ramified primes. □ 

Proposition 9.8. (Multiplication for Type III primes) For i = 1,2 let Ii — 

[si,p, s'[uj] be two ideals such then I\I 2 = (D)I 3 . I 3 — I[I 2 J and D = D\D 2 D 3 
where these quantities are given as follows: 



D\ = gcd ( -77, S2 

S 1 



Do 



I'l 



D 1 D 2 D 3 P ' Dd), 



S 2 



D 3 = gcd(s' 2 ',Si), 



, and 



D 1 D 2 D 3 ,y ' D X D 3 



/ 3 1^-2^3 

J = [D 3 ,p,uj]. 

Proof. This follows in the same manner as the previous proof. 



□ 
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Proposition 9.9. (Multiplication for Type IV primes) For i = 1,2 let Ii — 

[si, s'^ui + p), s"(vi + Wip + u)] be two ideals. Then I\I 2 — {D)h where 

I 3 = I[I' 2 J and D = D 1 D 2 D 3 D 4 D 5 D 6 D 7 . 
These quantities are defined as follows: 

£>i = gcd(s2, st/s'^s", vi - utwi), D 2 = gcd(s", s 2 /s' 2 s 2 , v 2 - w 2 u 2 ) 7 



gcd( Sl _ gcd( S2 / S ' 2 4', S '/) 

i/3 — T-, 7—. T, T, r 1 UH 



gcd(si/s[s",s 2 ,vi -W1U1)' gcd(s 2 /s 2 s 2 ,s'{,v 2 - w 2 u 2 )'' 



D 5 = gcd(s[/D 4 , 4'/£>i), D 6 = gcd{s' 2 /D 3 , s'(/D 2 ), 



D 7 = gcd 



' D 2 D t 



si 



D 2 D 4 D 5 D 6 D 7 ' D4D5 D 2 D 6 D 7 



(«i + wip + u) 



•S 2 



DiDaDnDeDr ' AsA/' AAA 



■(V2 + W 2 p + Ul) 



J = [D 5 D e , p,uj][D 7 , p,uj + E]. 

Proof. The proof follows in a similar manner as the previous three proofs. Again, 
we seek only to highlight the differences. We begin by factoring I 4 into three ideals 
as 



h — h,ih,2h,3 — 



si 

0' q' 1 



, u\ + p, v\ — w\Ui + uj 



s[, s[p, vi + wip + u] [s'{, p, s"u>], 



and likewise with I 2 . The quantity A (resp. D 2 , D 3 , A) is the nonprimitive part 
from 11,1/2,3 (resp. I 2 ,ili,3, h,il2,2, h, 1/1,2)- We remove these factors from the 
ideals and consider Ii, 2 / 2 ,3 (resp. I 2 , 2 h,z). Here we are considering the case in 
which one ideal contains squares of the ramified prime (say q 2 ) and the other ideal 
contains products of a ramified prime with its corresponding unramificd prime (say 
pq). The product of q 2 pq is (-P)q. Thus we get (A)[A, p,ui] (resp (A)[A, p,w]). 
We remove the factor A (resp. A) from I\ :2 and I 2 ^ (resp. I 2 ^ 2 and A3) and 
consider one last product of 11,3/2.3 ■ This is a product where each ideal has primes 
of the form pq and therefore the product must be of the form (P)p. We get 
(D r )[Dr,p,u + E\. 

□ 



We have stated the basic ideal operations necessary for arithmetic. The key 
now is to give a method to find a distinguished element in an ideal class. From 
this point forward, T/K will be assumed to have a totally ramified infinite place 
with 3 \ degFI 2 . This latter assumption is necessary since we rely on Theorem 
16.11 These assumptions also ensure that the ideal class group is isomorphic to the 
Jacobian of the curve. 
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10. Elements of Minimal Norm 

The content in this section closely mirrors Section 8 of pp. Given an ideal 
J = [s, s'(u + p), s"(v + wp + uj)], we want to find an element in this ideal that 
has minimal norm. The existence of such an element (up to a constant scalar) is 
guaranteed by Theorem 16. 31 Writing the ideal as a triangular matrix and assigning 
a weight to each column corresponding to the norm of the associated element, the 
algorithm proceeds to perform elementary row operations on the matrix to find an 
element of minimum weight. 

s 

s'u s' 

s"v s"w s" 

t t t 

3*degF/ 2 3 * deg + degF/ 2 3*deg + degF 2 / 

By Theorem 16.11 the weights of distinct columns lie in distinct residue classes 
modulo three. If two rows have their weight coming from the same position it is 
possible to reduce the weight of one of the rows while still maintaining a basis for the 
ideal. The algorithm below just encodes the order in which to do the minimization. 

Algorithm 1: MinElement 

Input: Minimal Element Algorithm. Let / = [s, s'(u + p), s"(v + wp + 
Output: a E I non-zero so that N(a) has minimal degree. 

Precomputation: Use the ideal to define b\ — 61,2, ^1,2) = (s,0, 0), b 2 = 

(62,1)62,2,62,2) = (s'u, s',0), and 63 = (634,63,2,63,2) = (s"v, s"w, s"). Assign 
weights w iA = 3deg& i; i, w ia = 3degb i2 +degfY 2 , and, w it3 = 3deg6 i)3 + 
degF 2 /. 

1: Set w.i = maxjw^i, Wi,2, ^is}, an d choose a.; so that Wi = w iai (i.e., Wi — 
Wi.ai = degN(bi)). Order the hi and their associated values so that w\ < W2 < 
u> 3 . 

2: while ai = <22 or 0,2 = 03 or a± = (13 do 
3: case I: a\ = a-j 

4: b 2 , q 2 = 6i, ai c + r 

5: replace 62 := b 2 — cb\ and recalculate a 2 , W2- 

6: end case 

7: case II: a\ = 03 

8: 6 3ja3 = &i l01 c+ r 

9: replace 63 := b-j — cb\ and recalculate 03, W3. 

10: end case 
11: case III: a 2 = 03 

12: 63, a 2 = b 2< a 2 C + r 

13: replace 63 := 63 — cb 2 and recalculate 03, W3. 

14: end case 

15: Reorder the bi's and associated values. 
16: end while 

17: Return: 61,1 + bi 2 p + 61,30;, the element of minimal norm. 



Now that we can calculate an element of minimal norm, our goal will be to 
construct a canonical basis for the principal ideal generated by this element. 
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11. Canonical Basis 

The algorithm for finding a canonical basis for a principal ideal generated by an 
element of Ojr is straightforward. 

Algorithm 2: CanBasis 
Input: a + bp + clu G Op 

Output: A canonical basis of the ideal / = (a). 
1: Create the matrix 

a be 
bA-cFI a bl 
-bFI -cF a-cE 

2: Using elementary row operations transform it into a lower triangular matrix 

" c 3 
c 2 b 2 
c\ b\ a\ 

3: Set d = gcd(ai,b 2 ), s — c^/d, s' — b 2 /d, s" — a\jd and u = C2/{s'd) 
(mod s/s'). 

4: Compute c and w such that b\j d = s'c + w and deg(w) < deg(s'). 
5: Compute v = ci/d — s'qu (mod s). 

6: Return: The ideal d [s, s'(p + u), s"lj + wp + v] generated by a, given in terms 
of a canonical basis. 



Since we used only elementary row operations, the algorithm gives a valid F g [x]- 
basis for the principal ideal generated by a + bp + clo. The latter steps in the 
algorithm ensure the basis is canonical. 

12. Composition and Reduction in the ideal class group 

We have all the tools we need to do composition and reduction in the ideal class 
group. Given two ideals 1\ and/2 we find a distinguished representative in the class 
of 1 1 12 as follows: 

Algorithm 3: CompRed 

Input: Two ideals 1\ and I 2 with canonical representations. 
Output: The distinguished ideal J equivalent to I\I 2 . 

l: Calculate -Z3 = Iii2- 

2: Find 73. 

3: Find a £ I3 of minimal norm using Algorithm [T] 

4: Compute (a) = (d) [s, s'(u + p), v + wp + lo] using Algorithm^ 

5: Compute J = {a)/h. 

6: Return: J. 



The proof of correctness has been established in the previous sections by invoking 
the appropriate theorems. For almost all cubic function field in characteristic three 
with a totally ramified place at infinity, we have given composition and reduction 
in the ideal class group. There are, however, some exceptions - see Example 1 
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in Section 6 for a function field with a totally ramified place for which the above 
algorithm will fail to succeed at reduction in the ideal class group. 

13. Example Computation 

We present an example to illustrate the algorithms. The field of constants is 
F 3 io = F3[q;]/(q! 10 — a 6 ~ a 5 — a 4 + a — 1) and the cubic function field is ¥ 3 w(x,y) 
where y is a root of T 3 — T + x 4 + a. Since A — 1 , this is an Artin-Schreier extension 
with no finite ramification. The infinite place is totally ramified and the genus of 
the function field is 3. We let 

ii = [x, -a 9 - a 8 + a 7 + a 6 + a 5 - a 4 - a 3 + p, a 8 - a 6 - a 5 + a 4 - a 3 + a 2 + oj] 

and we will find the reduced ideal in the class of if following Algorithm [3] 

Step 1. We calculating if and if followed by If invoking Proposition 19.21 each 
time. We state only the the parameters used to define if which has the form 
[s 2 , u 2 + p,v 2 +uj], where 

S2 = x 6 , u 2 — x 4 - a 9 - a 8 + a 7 + a 6 + a 5 - a 4 — a 3 , and 

v 2 = {-a 9 - a 8 + a 7 + a e + a 5 - a 4 - a 3 )x 4 - a 8 + a e + a 5 - a 4 + a 3 - a 2 - 1 . 

Step 2. We compute ^3 = I 2 - It is clear that this inverse will have the form 
[as, Ssp, U3 + wsp + cj]. By appealing to Proposition we have S3 = x 6 , v% = —v 2 , 
and W3 = —u 2 . 

Step 3. We apply Algorithm Q] to the above ideal. We note that the while- loop 
finishes in two iterations to give a + bp + cui as the element of minimal norm, where 

a = (a 8 - a 6 - a 5 +a 4 - a 3 +a 2 - l)x 2 
b = (a 9 + a 8 -a 7 -a 6 -a 5 +a 4 +a 3 )x 2 
c = x 2 

Step 4. Applying Algorithm [2] to the above parameters gives 

(x 2 )[x 4 ,x 4 p, {a 8 -a 6 -a 5 + a 4 -a 3 + a 2 ~l) + (a 9 + a 8 -a 7 -a 6 ~a 5 +a 4 +a 3 )p+uj}. 

Step 5. Finally, we calculate (a) /I3 according to Proposition 18. Ill This has 
the form [34, U4 + p, U4 + u>] where 

S4 = x 2 , 

U4 = -a 9 - a 8 + a 7 + a 6 + a 5 ~ a 4 — a 3 , 
v 4 = a 8 - a 6 - a 5 + a 4 - a 3 + a 2 . 

Note that this happens to be If. 

14. Conclusion 

This work was chiefly motivated by two sources. First we wanted to find compa- 
rable results of [SI [TO] in the characteristic 3 case. Given the history of the subject, 
it might have been sensible to attempt to compute fundamental units as in [11) . 
However, a naive approach with the integral basis given in Section 3 failed to work 
and we are currently investigating a solution. However, the second motivation was 
a generalization along the lines of Bauer's [JJ computation in the ideal class group 
assuming the function field has a totally ramified infinite place is available. The 
material presented here is the subject of the second author's Ph.D. thesis. 
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